Lucene search
HistoryJan 01, 2007 - 11:00 p.m.
CVE-2006-6835
cve-2006-6835
sql injection
neocrome land down under
ldu
security vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.9%
SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php.
Affected configurations
Node
neocromeland_down_underMatch800
ORneocromeland_down_underMatch801
ORneocromeland_down_underMatch802
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.9%
Related for CVE-2006-6835